5244 matches found
CVE-2023-29080
CVE-2023-29080 concerns Revenera InstallShield (versions 2021 R2 and 2022 R2). A DLL hijacking vulnerability arises from an InstallScript custom action that extracts binaries to a predefined writable folder during installation. With standard user write access to these files/folders, an attacker c...
PT-2025-1387 · Revenera · Revenera Installshield
Name of the Vulnerable Software and Affected Versions: Revenera InstallShield versions 2021 R2 through 2022 R2 Description: The issue concerns a potential privilege escalation vulnerability due to the addition of an InstallScript custom action to a Basic MSI or InstallScript MSI project. This...
Revenera InstallShield 安全漏洞
Revenera InstallShield Flexera InstallShield is a development package from Revenera Inc. for building Windows installers and MSIX packages. A security vulnerability exists in Revenera InstallShield version 2022 R2 and version 2021 R2, which stems from a DLL hijacking triggered by improperly...
CVE-2025-24826
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4625...
CVE-2025-24826
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4625...
CVE-2025-24826
CVE-2025-24826 affects Acronis Snap Deploy (Windows) , with vulnerable component defined as the installation/build prior to 4625. The root cause is insecure folder permissions leading to a local privilege escalation . The CVSS data indicates a local attack vector with high impact on confidentiali...
CVE-2025-24826
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4625...
CVE-2025-24826
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4625...
CVE-2024-8401
CWE-79: Improper Neutralization of Input During Web Page Generation ‘Cross-site Scripting’ vulnerability exists when an authenticated attacker modifies folder names within the context of the product...
CVE-2024-8401
This CVE-2024-8401 concerns Schneider Electric EcoStruxure products (PME, EPO, PSO) with a Cross-site Scripting (XSS) flaw caused by improper input neutralization during web page generation. An authenticated attacker could modify folder names within the product context, potentially enabling malic...
CVE-2024-8401
CWE-79: Improper Neutralization of Input During Web Page Generation ‘Cross-site Scripting’ vulnerability exists when an authenticated attacker modifies folder names within the context of the product...
CVE-2024-8401
CWE-79: Improper Neutralization of Input During Web Page Generation ‘Cross-site Scripting’ vulnerability exists when an authenticated attacker modifies folder names within the context of the product...
Acronis Snap Deploy 安全漏洞
Acronis Snap Deploy is a platform for batch deployment of system images from Acronis Switzerland. A security vulnerability exists in Acronis Snap Deploy that stems from a local elevation of privilege due to insecure folder permissions...
January 28, 2025—KB5050094 (OS Build 26100.3037) Preview
None None...
PT-2025-5581 · Acronis · Acronis Snap Deploy
Name of the Vulnerable Software and Affected Versions: Acronis Snap Deploy Windows versions before build 4625 Description: The issue is related to local privilege escalation due to insecure folder permissions. This allows for potential exploitation, though specific details about the estimated...
CVE-2025-0720
A vulnerability was found in Microword eScan Antivirus 7.0.32 on Linux. It has been rated as problematic. Affected by this issue is the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner of the component Folder Watch List Handler. The manipulation leads to stack-based buffer...
CVE-2025-0720 Microword eScan Antivirus Folder Watch List rtscanner removeExtraSlashes stack-based overflow
A vulnerability was found in Microword eScan Antivirus 7.0.32 on Linux. It has been rated as problematic. Affected by this issue is the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner of the component Folder Watch List Handler. The manipulation leads to stack-based buffer...
eScan Antivirus 安全漏洞
eScan Antivirus is a network anti-virus security software from eScan. A security vulnerability exists in eScan Antivirus version 7.0.32, which originates in the Folder Watch List Handler component, where the removeExtraSlashes function causes a stack buffer overflow...
PT-2025-4020 · Microworld · Escan Antivirus
Name of the Vulnerable Software and Affected Versions: Microword eScan Antivirus version 7.0.32 Description: A problematic issue has been found, affecting the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner in the component Folder Watch List Handler. This issue leads to a...
